29 vulnerability engineer jobs at 21 companies in Fontana, CA
3w
Save
Mark Applied
Hide
3w
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
RAVE Aerospace: Developing in-flight entertainment and connectivity systems for airlines.
6+ YOEBachelor's in Engineering or equivalent,6+ years systems engineering,knowledge of DO-326A/ED-202A/ISO 27000/ARINC 811,threat modeling,secure coding (C/C++ or Golang),cloud (AWS, Azure),EDR,SIEM,vulnerability management.
DO-326A/ED-202A, ISO 27000, ARINC 811, C/C++, Golang, AWS, Azure, EDR, SIEM, Kali Linux, nmap, Burp Suite, Nessus, OpenVAS, Android, Linux
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
Los Angeles or Palo Alto or Bellevue or Santa Monica
$133k-$235k/yrOnsiteFull Time
SnapNYSE: SNAP: Develops social media applications and augmented reality technology.
2+ YOEBachelor’s degree or equivalent, 2+ years security-related experience, expertise in infrastructure/application/cloud security domains, programming (Python/Go/Java), experience with vulnerability scanners, SIEM, EDR, and strong communication and problem-solving skills.
Anduril Industries: Defense technology building autonomous military hardware and software.
U.S. Person required. Experience with Linux kernel development, board bring-up (device trees, bootloaders, kernel drivers), uboot/EDK2, triaging and patching vulnerabilities, C or Rust, and interest in Nix/NixOS instead of Yocto/buildroot.
BDNYSE: BDX: Manufactures medical devices, surgical instruments, and pharmacy automation systems.
3+ YOEBachelor's in cybersecurity/computer science or related; 3+ years in product security/product or software development or QA; experience with static code analysis and vulnerability scanning; foundational cryptography and PKI; knowledge of threat modeling and medical-device security.
Black Duck, Coverity, Veracode, Nessus, Snyk, Metasploit, SBOM, TLS, mTLS, HL7, FHIR, Bluetooth LE, STRIDE, PASTA, NIST, OWASP, PKI
Esri: Developing software for digital mapping and spatial data analysis.
8+ YOE8+ years in RMF/A&A, vulnerability scanning, system hardening for Linux/Windows, experience with RMF tools (XACTA/eMASS), DoD 8570 certification, active Top Secret/SCI clearance, and a relevant bachelor's degree.
Southern California Alcohol and Drug Programs: Provides substance abuse treatment and supportive housing services.
1+ YOEFingerprint/background clearance, high school diploma/GED, minimum 1 year case management or job developer experience, ability to work with vulnerable clients under stress.
Credit Union of Southern California: A member-owned financial cooperative providing banking and loan products.
5+ YOE5+ years experience on multi-site routed networks (SD-WAN, routing, Layer 2 switching, VoIP); strong troubleshooting, documentation, PowerShell automation, and security/vulnerability remediation skills; valid CA driver’s license and reliable transportation.
SD-WAN, PowerShell, Microsoft Azure, Amazon AWS, Cisco Catalyst, Meraki, Cisco ASA, SonicWall, Kemp Load Balancer, Rapid7, Microsoft Word, Microsoft Excel, Outlook, Microsoft PowerPoint, Microsoft Teams
Latham & Watkins: Global law firm providing legal services for complex corporate matters.
8+ YOEBachelor's or equivalent, active security certification, 8+ years IT including information security, experience with Windows/Linux, network/firewall, SIEM/SOAR/EDR, vulnerability assessment, incident response, and strong communication skills.
Edison InternationalNYSE: EIX: Generating and distributing electricity to customers in Southern California.
7+ YOE7+ years IT/cybersecurity experience, US citizenship, experience with SAP security and vulnerability management, Onapsis platform experience preferred, CISSP or GSEC preferred, knowledge of NIST framework.
6+ YOESenior cybersecurity professional with 6+ years experience in offensive and defensive security, vulnerability management, threat detection, incident response, cloud and infrastructure security, scripting (PowerShell, Python, JavaScript), and integrating automation and SIEM/SOAR tooling.
PowerShell, Python, JavaScript, MITRE ATT&CK, NIST CSF, ISO27001, Center for Internet Security, OWASP, CI/CD, Security Orchestration Automation and Response, Security Information and Event Management, Vulnerability Scanning, Security Threat Feeds, Red Team Tooling
Latham & Watkins: Global law firm providing legal counsel to businesses.
8+ YOE8+ years IT experience including information security, active security certification, bachelor\u0002s degree or equivalent (experience may substitute), proficiency with Windows/Linux, network/firewall management, SIEM/SOAR/EDR, vulnerability assessment, incident response, penetration testing; Python and law office experience preferred.
Microsoft Windows, Linux, SIEM, SOAR, EDR, Python, firewall
SCAN Health Plan: Providing Medicare Advantage plans and integrated healthcare for seniors.
10+ YOE10+ years cybersecurity experience with 3+ years focused on AI/ML security, proven Azure AI stack expertise, knowledge of LLM vulnerabilities, data security, and AI governance.
Azure OpenAI Studio, Azure AI Foundry, Azure AI Search, Azure Machine Learning, Azure Kubernetes Service (AKS), Model Context Protocol (MCP), REST, gRPC, Python, PowerShell, Bash, Azure Entra ID
Columbia BankNASDAQ: COLB: Commercial and consumer banking services in the Western United States.
Administer and monitor enterprise security services (firewalls, IDS/IPS, proxy, SIEM, IAM), perform incident response, vulnerability management, and regulatory compliance; 2–7 years IT/cybersecurity experience preferred; strong communication and prioritization skills.
Firewalls, Intrusion Detection/Prevention System, Proxy, Mail Gateways, Data Loss Prevention, Denial of Service Protection, Network Access Control, Endpoint Protection Suite, Advanced Malware Prevention, Vulnerability Management, Security Information and Event Management, Identity Governance, Single Sign-On, Public Key Infrastructure, Privileged Account Management, IDS/IPS, routers, switches
Latham & Watkins: Global law firm providing comprehensive legal and advisory services.
8+ YOE8+ years IT experience including information security; bachelor's degree or equivalent preferred; active security certification; proficiency with Windows and Linux, network/firewall configuration, SIEM/SOAR/EDR, vulnerability assessment, incident response, and penetration testing; Python skills preferred.
Southern California EdisonNYSE: EIX: Electric utility providing electricity transmission and distribution services.
7+ YOE7+ years IT/cybersecurity experience, US citizenship required. Experience with SAP security, vulnerability management, Onapsis, NIST framework, Unix/Linux, Kubernetes; CISSP or GSEC preferred. NERC/CIP impacted role requiring background assessment.
Onapsis Platform, RISE/BTP, SAP HANA, ABAP, Kubernetes, Linux, Unix